What UK cosmetic pharma businesses must do before July 2026
For UK cosmetics businesses, summer 2026 isn't a quiet period - it's a compliance crunch. Three pieces of legislation are either already in force or reaching their placement deadlines in the coming weeks, and the operational knock-on across formulations, labelling, stock management, and supplier records is significant.
This isn't about future-proofing. The deadlines are here. If you haven't completed formulation audits, reviewed your supplier documentation, or flagged affected SKUs in your warehouse, now is the time.
What's changed and when
The UK's regulatory framework for cosmetics has moved quickly in 2026. Two new statutory instruments have introduced restrictions that go well beyond the 2025 amendments, and one that took effect in January is already generating compliance pressure on stock that may still be in distribution.
SI 2025/901 took effect on 21 January 2026, restricting the use of Oxybenzone in cosmetics placed on the GB market, with non-compliant stock required to be withdrawn by 21 July 2026. If you have products containing Oxybenzone that were placed on the market before January and don't meet the amended Annex 6 concentration limits, that withdrawal deadline is weeks away.
SI 2026/23, in force since January 2026, adds 16 newly classified CMR substances to Annex II of the UK Cosmetics Regulation and introduces the new formaldehyde labelling threshold - requiring the warning "contains formaldehyde" on any product releasing formaldehyde at or above 0.001%. The placement deadline for affected products is 15 August 2026, with sell-through permitted until 14 February 2027.
SI 2026/109, enacted in March 2026, adds a further 17 CMR substances and introduces new concentration restrictions on Hexyl Salicylate, with a placement deadline of 15 August 2026 and a withdrawal deadline of 15 February 2027.
Together, these three instruments cover a wide range of ingredients in active use across skincare, haircare, sun care, and fragrance - which means the scope of any compliance review is broader than it might first appear.
The UK–EU divergence problem hasn't gone away
In January 2026 the European Commission introduced parallel CMR amendments under Commission Regulation (EU) 2026/78, applicable from 1 May 2026 - but with different timelines, thresholds, and substance lists to the UK instruments.
For businesses selling into both markets this is now a structural reality, not a transitional headache. The same formulation may be compliant in Great Britain but non-compliant in the EU, or vice versa, depending on which substances are present and at what concentrations. Northern Ireland continues to follow EU rules under the Windsor Framework, adding a further layer for any business distributing across both.
The practical consequence is separate Product Information Files, separate Responsible Person arrangements, and in many cases genuinely distinct SKUs with different labels for the same product. Managing that without a clear system for tracking which SKU belongs to which regulatory version, and which stock in your warehouse is destined for which market, creates risk that compounds over time.
"A PIF that predates the 2026 amendments isn't just out of date - in most cases it's non-compliant. The question isn't whether you need to update your documentation. It's whether you can do it fast enough."
Where operations teams carry the load
Regulatory change tends to land in quality or legal teams first. But the downstream impact falls on operations. When an ingredient is restricted, someone needs to identify which SKUs are affected, trace them back to specific supplier batches, check what's in the warehouse, flag anything in transit, and make sure nothing non-compliant goes out the door. That process is only as fast as the data you have access to.
Businesses running on disconnected systems - stock records that don't link to formulation data, supplier information held in spreadsheets, no batch-level visibility - find this exercise takes days. Businesses with centralised, real-time data can move in hours. With deadlines measured in weeks, that difference matters.
The same applies to the sell-through windows. Compliant and non-compliant stock will legitimately co-exist in warehouses through to early 2027. Without clear system-level segmentation — flagging which batches can still be sold and which need to be withdrawn - the risk of a compliance breach is operational, not just theoretical. It's a picking error waiting to happen.
Four things to have in place before August
- Formulation audit against 2026 amendments
Every SKU in your range needs checking against the updated Annex II, III, IV and V substance lists under SI 2026/23 and SI 2026/109, plus the Oxybenzone restrictions under SI 2025/901. If you use a contract manufacturer or formulation partner, confirm they've done the same. - Safety Assessor sign-off on formaldehyde calculations
The new 0.001% threshold requires your Safety Assessor to verify updated calculations for any product using preservatives or raw materials that may release formaldehyde as a by-product. This isn't a desk exercise - it needs supplier specification data and recalculated safety assessments. - PIF and CPSR updates
Any formulation, labelling, or supplier change triggered by the 2026 amendments requires an updated Product Information File. A PIF that predates these instruments is likely non-compliant and exposes you in the event of an OPSS inquiry or audit. - Warehouse stock segmentation
Identify all affected stock currently held, map it against sell-through deadlines, and ensure your warehouse management process distinguishes clearly between stock that can continue to be sold and stock that needs to be withdrawn. Batch-level traceability is the foundation of this — without it, you're relying on manual checks.
What good looks like operationally
The businesses navigating this well share a few common characteristics. They can run an ingredient search across their entire SKU range and get a result in minutes, not days. Their supplier records are current, searchable, and linked to the products that use those ingredients. Their batch records connect goods-in to dispatch, so a recall or withdrawal exercise is a system query rather than a manual audit. And their warehouse knows - at a stock level - which products are within compliance and which are in a transitional window.
None of that requires anything exotic. It requires stock, supplier, and order data to live in one place rather than several.
Looking ahead
The July and August 2026 deadlines are the immediate priority. Beyond that, the sell-through windows running to February 2027 will require ongoing stock monitoring - this isn't a one-off exercise. And with UK and EU regulatory frameworks continuing to diverge on their own legislative timelines, the number of businesses managing genuinely distinct compliance positions for different markets will only increase.
The OPSS has shown an appetite for market surveillance and enforcement action in adjacent regulated categories. Cosmetics businesses that treat these amendments as a documentation exercise rather than an operational one are taking a risk they don't need to take.